@aws-sdk/credential-provider-node changelog and release notes, page 2

3.972.020 Jan 2026

clients: update client endpoints as of 2026-01-20

3.972.0(2026-01-20)

Chores

replace rimraf with premove (#7669) (e0b484fa)

New Features

clients: update client endpoints as of 2026-01-20 (3266a28d)
client-workspaces-instances: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. (a660c503)
client-odb: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. (f906d762)
client-bedrock-runtime: Added support for extended prompt caching with one hour TTL. (2cc679ff)
client-keyspaces: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) (a7d41c3f)
client-auto-scaling: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. (5ca740f5)
client-verifiedpermissions: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. (3fe5ed93)

For list of updated packages, view updated-packages.md in assets-3.972.0.zip

Open source →

Additional notes

Features

client-auto-scaling: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. (5ca740f)
client-bedrock-runtime: Added support for extended prompt caching with one hour TTL. (2cc679f)
client-keyspaces: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) (a7d41c3)
client-odb: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. (f906d76)
client-verifiedpermissions: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. (3fe5ed9)
client-workspaces-instances: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. (a660c50)
clients: update client endpoints as of 2026-01-20 (3266a28)

Open source →

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.970.015 Jan 2026

util-endpoints: update aws partitions.json

3.970.0(2026-01-15)

Chores

util-endpoints: update aws partitions.json (057ed943)
endpoints: update endpoints model (27bb9e6d)
models: update API models (e4aef87d)
codegen: update for handling __type in cbor structs (#7663) (2104fe9e)

Documentation Changes

client-ec2: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. (0e4c5b5c)

New Features

client-ecs: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. (0ebb2f22)
client-evs: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. (4f6b30a2)
client-deadline: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. (bb46d258)
client-cleanrooms: This release adds support for parameters in PySpark analysis templates. (bc4219bf)
client-opensearchserverless: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. (bfdce6ab)
client-lakeformation: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource (493fd840)
client-qconnect: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API (c54736e1)

Bug Fixes

core/protocols: custom behavior for __type in structure (#7661) (22c3a671)

For list of updated packages, view updated-packages.md in assets-3.970.0.zip

Open source →

Additional notes

Bug Fixes

core/protocols: custom behavior for __type in structure (#7661) (22c3a67)

Features

client-cleanrooms: This release adds support for parameters in PySpark analysis templates. (bc4219b)
client-deadline: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. (bb46d25)
client-ecs: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. (0ebb2f2)
client-evs: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. (4f6b30a)
client-lakeformation: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource (493fd84)
client-opensearchserverless: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. (bfdce6a)
client-qconnect: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API (c54736e)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.969.014 Jan 2026

codegen: sync for required member count

3.969.0(2026-01-14)

Chores

codegen: sync for required member count (#7655) (85f86da8)
clients: prettier ignore only 'src' folder and README (#7652) (51d2b8fc)

Documentation Changes

client-cost-explorer: Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. (7bee7245)
update version number requiring Node.js v20 (#7651) (8221f99e)

New Features

clients: update client endpoints as of 2026-01-14 (2e57c021)
client-connect: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. (224e5859)
client-eks: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. (9ab0b4d2)
client-socialmessaging: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. (5d9010bf)
client-redshift-serverless: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. (74186ff4)
client-redshift: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. (83a2d07e)
client-rds: no feature changes. model migrated to Smithy (75005b77)

Tests

client-s3: add test with empty input stream (#7649) (ce79a75e)
client-cloudwatch: set alarm name in describe command (#7653) (d6e582c9)

For list of updated packages, view updated-packages.md in assets-3.969.0.zip

Open source →

Additional notes

Features

client-connect: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. (224e585)
client-eks: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. (9ab0b4d)
client-rds: no feature changes. model migrated to Smithy (75005b7)
client-redshift-serverless: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. (74186ff)
client-redshift: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. (83a2d07)
client-socialmessaging: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. (5d9010b)
clients: update client endpoints as of 2026-01-14 (2e57c02)

Open source →

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.956.019 Dec 2025

crc64-nvme: add pure JS CRC64NVME implementation

3.956.0(2025-12-19)

Chores

crc64-nvme: add pure JS CRC64NVME implementation (#7592) (03019927)
codegen:
- differentiate union and struct schema (#7594) (a3f02028)
- update for $unknown union member handling (#7591) (2c738294)
- upgrade smithy to 1.65.0 (#7588) (8e9ad476)

Documentation Changes

supplemental-docs: typo fixes (#7590) (0f23c869)

New Features

clients: update client endpoints as of 2025-12-19 (e0360a8f)
client-wickr: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. (d105e0ef)
client-arc-region-switch: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. (33dbf8d8)
client-workspaces-web: Add support for WebAuthn under user settings. (a42b84c4)
client-iot: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. (bbbf580b)
client-qbusiness: It is a internal bug fix for region expansion (42a80dd7)
client-connect: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. (43dab925)
client-emr-serverless: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges (e95db238)

Bug Fixes

ec2-metadata-service: add configurable options for ttl and port precedence (#7584) (184cf70c)
core/protocols: $unknown union member support (#7593) (596fc405)

For list of updated packages, view updated-packages.md in assets-3.956.0.zip

Open source →

Additional notes

Bug Fixes

core/protocols: $unknown union member support (#7593) (596fc40)
ec2-metadata-service: add configurable options for ttl and port precedence (#7584) (184cf70)

Features

client-arc-region-switch: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. (33dbf8d)
client-connect: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. (43dab92)
client-emr-serverless: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges (e95db23)
client-iot: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. (bbbf580)
client-qbusiness: It is a internal bug fix for region expansion (42a80dd)
client-wickr: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. (d105e0e)
client-workspaces-web: Add support for WebAuthn under user settings. (a42b84c)
clients: update client endpoints as of 2025-12-19 (e0360a8)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.955.018 Dec 2025

codegen: downgrade spotless to 7.2.1

3.955.0(2025-12-18)

Chores

codegen: downgrade spotless to 7.2.1 (#7587) (ef66a21f)
clients: export star from models_N (#7586) (e9b7f20a)

New Features

clients: update client endpoints as of 2025-12-18 (11335218)
client-ec2: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. (4d1a66b9)
client-ecs: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. (751c797f)
client-arc-region-switch: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. (406035c4)
client-bedrock-agentcore-control: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. (800275ca)
client-appstream: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets (a94e6d55)
client-cleanrooms: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. (26987932)
client-artifact: Add support for ListReportVersions API for the calling AWS account. (8247b183)
client-iot: This release adds message batching for the IoT Rules Engine HTTP action. (aa2dc069)
client-sesv2: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. (7412e741)
client-bedrock-data-automation: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. (3f901e7c)
client-ecr: Adds support for ECR Create On Push (620e820d)
client-opensearch: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. (e574a591)
client-ssm-sap: Added "Stopping" for the HANA Database Status. (393a8516)

For list of updated packages, view updated-packages.md in assets-3.955.0.zip

Open source →

Additional notes

Features

client-appstream: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets (a94e6d5)
client-arc-region-switch: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. (406035c)
client-artifact: Add support for ListReportVersions API for the calling AWS account. (8247b18)
client-bedrock-agentcore-control: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. (800275c)
client-bedrock-data-automation: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. (3f901e7)
client-cleanrooms: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. (2698793)
client-ec2: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. (4d1a66b)
client-ecr: Adds support for ECR Create On Push (620e820)
client-ecs: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. (751c797)
client-iot: This release adds message batching for the IoT Rules Engine HTTP action. (aa2dc06)
client-opensearch: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. (e574a59)
client-sesv2: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. (7412e74)
client-ssm-sap: Added "Stopping" for the HANA Database Status. (393a851)
clients: update client endpoints as of 2025-12-18 (1133521)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.954.017 Dec 2025

changes for handling conflicting params

3.954.0(2025-12-17)

Chores

core: add license file (#7096) (4d7bd08b)
codegen:
- bump jreleaser to 1.21.0 (#7585) (7b9ec0f7)
- changes for handling conflicting params (#7549) (1978c68f)
ci: scope down GitHub Token permissions for lock.yml (#7555) (b0bd47fa)
clients: bump '@smithy/*' versions (#7582) (b654d972)

Documentation Changes

core/protocols: add docs for schemas and protocols (#7583) (16628667)

New Features

clients: update client endpoints as of 2025-12-17 (cf14f274)
client-mediapackagev2: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. (988aac9d)
client-inspector-scan: Adds an additional OutputFormat (fb2ca52a)
client-guardduty: Add support for dbiResourceId in finding. (50534058)
client-kafkaconnect: Support dual-stack network connectivity for connectors via NetworkType field. (04719ac2)
client-sagemaker: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) (9833262e)
client-payment-cryptography-data: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. (fc2784b4)
client-payment-cryptography: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. (1d7c22e4)
client-gameliftstreams: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. (94316515)
client-mediaconvert: Adds support for tile encoding in HEVC and audio for video overlays. (010a9f7d)
ec2-metadata-service: add retries for IMDS requests (#7569) (4b9a0ea9)

For list of updated packages, view updated-packages.md in assets-3.954.0.zip

Open source →

Additional notes

Features

client-gameliftstreams: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. (9431651)
client-guardduty: Add support for dbiResourceId in finding. (5053405)
client-inspector-scan: Adds an additional OutputFormat (fb2ca52)
client-kafkaconnect: Support dual-stack network connectivity for connectors via NetworkType field. (04719ac)
client-mediaconvert: Adds support for tile encoding in HEVC and audio for video overlays. (010a9f7)
client-mediapackagev2: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. (988aac9)
client-payment-cryptography-data: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. (fc2784b)
client-payment-cryptography: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. (1d7c22e)
client-sagemaker: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) (9833262)
clients: update client endpoints as of 2025-12-17 (cf14f27)
ec2-metadata-service: add retries for IMDS requests (#7569) (4b9a0ea)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.952.015 Dec 2025

codegen: apply spotless eclipse formatting

3.952.0(2025-12-15)

Chores

codegen: apply spotless eclipse formatting (#7573) (7e8a34ea)

Documentation Changes

client-bedrock-agentcore-control: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. (6207cfae)

New Features

client-service-quotas: Add support for SQ Dashboard Api (bcc5261c)
client-entityresolution: Support Customer Profiles Integration for AWS Entity Resolution (32903b15)
client-health: Updating Health API endpoint generation for dualstack only regions (c8be328f)
client-s3: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. (55955e01)
client-ec2: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. (f5db7c3c)
client-cloudwatch-logs: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. (23d7db9d)
client-route53resolver: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. (93737551)
client-glacier: Documentation updates for Amazon Glacier's maintenance mode (069dcf44)
client-connect: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. (c9b56eb0)
client-mediatailor: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. (d0aae6dd)

Bug Fixes

client-sts: warn sts default region only when used (#7579) (6512de50)
credential-provider-ini: pass requestHandler from client to login provider (#7577) (a0bd362c)

For list of updated packages, view updated-packages.md in assets-3.952.0.zip

Open source →

Additional notes

Bug Fixes

client-sts: warn sts default region only when used (#7579) (6512de5)
credential-provider-ini: pass requestHandler from client to login provider (#7577) (a0bd362)

Features

client-cloudwatch-logs: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. (23d7db9)
client-connect: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. (c9b56eb)
client-ec2: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. (f5db7c3)
client-entityresolution: Support Customer Profiles Integration for AWS Entity Resolution (32903b1)
client-glacier: Documentation updates for Amazon Glacier's maintenance mode (069dcf4)
client-health: Updating Health API endpoint generation for dualstack only regions (c8be328)
client-mediatailor: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. (d0aae6d)
client-route53resolver: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. (9373755)
client-s3: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. (55955e0)
client-service-quotas: Add support for SQ Dashboard Api (bcc5261)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.948.09 Dec 2025

middleware-recursion-detection: upgrade lambda-invoke-store dependency

3.948.0(2025-12-09)

Chores

middleware-recursion-detection: upgrade lambda-invoke-store dependency (#7559) (dbc65195)

New Features

clients: update client endpoints as of 2025-12-09 (012e1f9a)
client-mgn: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. (a0a347c6)
client-guardduty: Adding support for Ec2LaunchTemplate Version field (4903763d)
client-appsync: Update Event API to require EventConfig parameter in creation and update requests. (6298ec44)
client-route-53: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region (c21e90bc)
client-account: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. (ae9e6fce)
client-ivs-realtime: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. (db225910)

For list of updated packages, view updated-packages.md in assets-3.948.0.zip

Open source →

Additional notes

Features

client-account: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. (ae9e6fc)
client-appsync: Update Event API to require EventConfig parameter in creation and update requests. (6298ec4)
client-guardduty: Adding support for Ec2LaunchTemplate Version field (4903763)
client-ivs-realtime: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. (db22591)
client-mgn: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. (a0a347c)
client-route-53: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region (c21e90b)
clients: update client endpoints as of 2025-12-09 (012e1f9)

Open source →

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.947.08 Dec 2025

codegen: service closure knowledge index

3.947.0(2025-12-08)

Chores

codegen: service closure knowledge index (#7554) (731dbfef)
core/client: emit warning for Node.js 18.x end-of-support (#7540) (fee7ba1d)

Documentation Changes

add support policy section for Node.js/ECMAScript versions (#7556) (bf1f6e0b)

New Features

clients: update client endpoints as of 2025-12-08 (7e0d61b2)
client-cost-explorer: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. (011b4f65)
client-sesv2: Update Mail Manager Archive ARN validation (18c203b2)
client-redshift-serverless: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (c3d27769)
client-identitystore: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. (14887fde)
client-rds: Adding support for tagging RDS Instance/Cluster Automated Backups (41b9a139)
client-partnercentral-selling: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. (867598e2)
client-rolesanywhere: Increases certificate string length for trust anchor source data to support ML-DSA certificates. (481b863e)
client-ec2: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. (229ff011)

Tests

core/protocols: add test and additional condition for xml declaration (#7552) (c83c986a)

For list of updated packages, view updated-packages.md in assets-3.947.0.zip

Open source →

Additional notes

Features

client-cost-explorer: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. (011b4f6)
client-ec2: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. (229ff01)
client-identitystore: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. (14887fd)
client-partnercentral-selling: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. (867598e)
client-rds: Adding support for tagging RDS Instance/Cluster Automated Backups (41b9a13)
client-redshift-serverless: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (c3d2776)
client-rolesanywhere: Increases certificate string length for trust anchor source data to support ML-DSA certificates. (481b863)
client-sesv2: Update Mail Manager Archive ARN validation (18c203b)
clients: update client endpoints as of 2025-12-08 (7e0d61b)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.943.02 Dec 2025

core/protocols: dynamodb serde performance adjustments

3.943.0(2025-12-02)

Chores

core/protocols: dynamodb serde performance adjustments (#7536) (ae3e73d8)

New Features

clients: update client endpoints as of 2025-12-02 (2f1ed327)
client-s3-control: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. (a8737778)
client-observabilityadmin: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. (1e20b0fe)
client-fsx: S3 Access Points support for FSx for NetApp ONTAP (cb2d0f30)
client-datazone: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. (f82c5bd4)
client-sagemaker: Added support for serverless MLflow Apps. (99cda6cb)
client-securityhub: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. (45c4bd14)
client-bedrock-agentcore-control: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. (072c9ff2)
client-bedrock-runtime: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. (57bdac08)
client-nova-act: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. (f0544c31)
client-opensearch: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (263dd4ca)
client-cloudwatch-logs: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. (f3383c4e)
client-bedrock: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. (c3ccd65d)
client-guardduty: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. (d338e8aa)
client-s3: New S3 Storage Class FSX_ONTAP (56ffa40a)
client-bedrock-agentcore: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. (ff3003b7)
client-savingsplans: Added support for Amazon Database Savings Plans (d93e9c41)
client-opensearchserverless: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (ae1f36f7)
client-cost-explorer: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. (4dd5ecaa)
client-lambda: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. (01476cf7)
client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (b9835814)
client-s3tables: Add storage class, replication, and table record expiration features to S3 Tables. (f73480a7)
client-rds: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. (0fc234af)

Tests

core/protocols: add Query error deserialization unit test (#7535) (88074553)

For list of updated packages, view updated-packages.md in assets-3.943.0.zip

Open source →

Additional notes

Features

client-bedrock-agentcore-control: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. (072c9ff)
client-bedrock-agentcore: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. (ff3003b)
client-bedrock-runtime: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. (57bdac0)
client-bedrock: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. (c3ccd65)
client-cloudwatch-logs: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. (f3383c4)
client-cost-explorer: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. (4dd5eca)
client-datazone: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. (f82c5bd)
client-fsx: S3 Access Points support for FSx for NetApp ONTAP (cb2d0f3)
client-guardduty: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. (d338e8a)
client-lambda: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. (01476cf)
client-nova-act: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. (f0544c3)
client-observabilityadmin: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. (1e20b0f)
client-opensearch: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (263dd4c)
client-opensearchserverless: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (ae1f36f)
client-rds: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. (0fc234a)
client-s3-control: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. (a873777)
client-s3: New S3 Storage Class FSX_ONTAP (56ffa40)
client-s3tables: Add storage class, replication, and table record expiration features to S3 Tables. (f73480a)
client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (b983581)
client-sagemaker: Added support for serverless MLflow Apps. (99cda6c)
client-savingsplans: Added support for Amazon Database Savings Plans (d93e9c4)
client-securityhub: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. (45c4bd1)
clients: update client endpoints as of 2025-12-02 (2f1ed32)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.935.019 Nov 2025

codegen: update for smithy/core serde fixes

3.935.0(2025-11-19)

Chores

codegen: update for smithy/core serde fixes (#7511) (ac2be518)

New Features

clients: update client endpoints as of 2025-11-19 (d7b51c49)
client-sts: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. (f9fed01c)
client-dynamodb: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. (622ef038)
client-medialive: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. (1667189e)
client-bcm-pricing-calculator: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. (e0dc140c)
client-backup: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. (498dcf3d)
client-connectcampaignsv2: This release added support for ring timer configuration for campaign calls. (1155c3c4)
client-ecs: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. (2ee0c3f3)
client-ecr: Add support for ECR archival storage class and Inspector org policy for scanning (ed5e232d)
client-sagemaker: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins (ad2587c7)
client-apigatewayv2: Support for API Gateway portals and portal products. (fc064256)
client-billingconductor: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. (4e32b65d)
client-cloudwatch-logs: Adding support for ocsf version 1.5, add optional parameter MappingVersion (2a15be86)
client-api-gateway: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. (e1d2d6b1)
client-cost-optimization-hub: Release ListEfficiencyMetrics API (2b031582)
client-bedrock-runtime: This release includes support for Search Results. (40ffa77a)
client-cloudtrail: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. (f8570665)
client-health: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. (c754b242)
client-networkflowmonitor: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource (66729787)
client-invoicing: Add support for adding Billing transfers in Invoice configuration (2e493490)
client-s3: Adds support for blocking SSE-C writes to general purpose buckets. (cee2e72f)
client-network-firewall: Partner Managed Rulegroup feature support (2e8472d6)
client-emr: Add CloudWatch Logs integration for Spark driver, executor and step logs (7e6e1684)
client-fsx: Adding File Server Resource Manager configuration to FSx Windows (2e3c0c96)
client-guardduty: Add support for scanning and viewing scan results for backup resource types (231cf06b)
client-sfn: Adds support to TestState for mocked results and exceptions, along with additional inspection data. (1b18be75)
client-partnercentral-channel: Initial GA launch of Partner Central Channel (b77d1682)
client-secrets-manager: Adds support to create, update, retrieve, rotate, and delete managed external secrets. (c13b6f97)
client-iam: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. (5774faa2)
client-cost-explorer: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors (ab1e44d9)
client-mediaconnect: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. (4a372d33)
client-billing: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. (8c6af8c2)
client-ec2: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. (e6ed3823)
client-signin: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. (21a4dff3)
client-inspector2: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. (ccaf51bb)
client-lambda: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. (fc517d86)
client-datazone: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. (21f12b43)
client-rum: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms (6513bd2a)
client-route-53: Add dual-stack endpoint support for Route53 (6fbbbd3c)
client-transcribe-streaming: This release adds support for additional locales in AWS transcribe streaming. (52dd1e7b)

For list of updated packages, view updated-packages.md in assets-3.935.0.zip

Open source →

Additional notes

Features

client-api-gateway: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. (e1d2d6b)
client-apigatewayv2: Support for API Gateway portals and portal products. (fc06425)
client-backup: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. (498dcf3)
client-bcm-pricing-calculator: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. (e0dc140)
client-bedrock-runtime: This release includes support for Search Results. (40ffa77)
client-billing: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. (8c6af8c)
client-billingconductor: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. (4e32b65)
client-cloudtrail: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. (f857066)
client-cloudwatch-logs: Adding support for ocsf version 1.5, add optional parameter MappingVersion (2a15be8)
client-connectcampaignsv2: This release added support for ring timer configuration for campaign calls. (1155c3c)
client-cost-explorer: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors (ab1e44d)
client-cost-optimization-hub: Release ListEfficiencyMetrics API (2b03158)
client-datazone: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. (21f12b4)
client-dynamodb: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. (622ef03)
client-ec2: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. (e6ed382)
client-ecr: Add support for ECR archival storage class and Inspector org policy for scanning (ed5e232)
client-ecs: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. (2ee0c3f)
client-emr: Add CloudWatch Logs integration for Spark driver, executor and step logs (7e6e168)
client-fsx: Adding File Server Resource Manager configuration to FSx Windows (2e3c0c9)
client-guardduty: Add support for scanning and viewing scan results for backup resource types (231cf06)
client-health: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. (c754b24)
client-iam: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. (5774faa)
client-inspector2: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. (ccaf51b)
client-invoicing: Add support for adding Billing transfers in Invoice configuration (2e49349)
client-lambda: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. (fc517d8)
client-mediaconnect: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. (4a372d3)
client-medialive: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. (1667189)
client-network-firewall: Partner Managed Rulegroup feature support (2e8472d)
client-networkflowmonitor: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource (6672978)
client-partnercentral-channel: Initial GA launch of Partner Central Channel (b77d168)
client-route-53: Add dual-stack endpoint support for Route53 (6fbbbd3)
client-rum: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms (6513bd2)
client-s3: Adds support for blocking SSE-C writes to general purpose buckets. (cee2e72)
client-sagemaker: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins (ad2587c)
client-secrets-manager: Adds support to create, update, retrieve, rotate, and delete managed external secrets. (c13b6f9)
client-sfn: Adds support to TestState for mocked results and exceptions, along with additional inspection data. (1b18be7)
client-signin: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. (21a4dff)
client-sts: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. (f9fed01)
client-transcribe-streaming: This release adds support for additional locales in AWS transcribe streaming. (52dd1e7)
clients: update client endpoints as of 2025-11-19 (d7b51c4)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.934.018 Nov 2025

clients: update client endpoints as of 2025-11-18

3.934.0(2025-11-18)

New Features

clients: update client endpoints as of 2025-11-18 (0f989254)
client-connect: This release added support for ring timer configuration for campaign calls. (ae3d7600)
client-cloudwatch-logs: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. (467947d4)
client-wafv2: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. (6da7a3db)
client-storage-gateway: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. (c7dd6fd7)
client-cloudformation: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. (04624df2)
client-kafka: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. (12ad701d)
client-backup: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. (0b0c9b8f)
client-iam: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. (b200679b)
client-resource-groups-tagging-api: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. (fa505515)
client-ec2: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. (b94cadfd)
client-bedrock-runtime: Amazon Bedrock Runtime Service Tier Support Launch (ea418df5)
client-auto-scaling: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. (5d96b688)

Tests

core/protocols: add json rpc perf baseline (#7505) (114920c6)

For list of updated packages, view updated-packages.md in assets-3.934.0.zip

Open source →

Additional notes

Features

client-auto-scaling: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. (5d96b68)
client-backup: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. (0b0c9b8)
client-bedrock-runtime: Amazon Bedrock Runtime Service Tier Support Launch (ea418df)
client-cloudformation: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. (04624df)
client-cloudwatch-logs: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. (467947d)
client-connect: This release added support for ring timer configuration for campaign calls. (ae3d760)
client-ec2: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. (b94cadf)
client-iam: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. (b200679)
client-kafka: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. (12ad701)
client-resource-groups-tagging-api: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. (fa50551)
client-storage-gateway: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. (c7dd6fd)
client-wafv2: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. (6da7a3d)
clients: update client endpoints as of 2025-11-18 (0f98925)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.933.017 Nov 2025

middleware-recursion-detection: upgrade aws/lambda-invoke-store to 0.2.0

3.933.0(2025-11-17)

Chores

middleware-recursion-detection: upgrade aws/lambda-invoke-store to 0.2.0 (#7506) (7454bd81)

New Features

clients: update client endpoints as of 2025-11-17 (a9869e99)
client-bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. (0e347c45)
client-database-migration-service: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. (c44cfad0)
client-mwaa-serverless: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. (53dbffc3)
client-device-farm: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface (574b1897)
client-ec2: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. (c0076d8e)
client-appstream: Adding support for additional instances and extended storage (ec6111c8)
client-route53resolver: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection (adec304c)
client-medialive: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. (d994f74e)
client-opensearch: This release adds index operation APIs to support Automatic Semantic Enrichment feature (8e96aa9a)
client-backup: AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. (8223f6d1)
client-guardduty: Add S3 On-Demand Object Scanning (0d0b1aea)
client-pcs: Added support for the managed Slurm REST API endpoint (2557db0f)
client-lex-models-v2: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. (f2bcb725)
client-mediapackagev2: Add support for SCTE messages in Segment file output (67d2919f)
client-glue: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). (266572c5)

Tests

client-elastictranscoder: remove tests (#7508) (089081ad)

For list of updated packages, view updated-packages.md in assets-3.933.0.zip

Open source →

Additional notes

Features

client-appstream: Adding support for additional instances and extended storage (ec6111c)
client-backup: AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. (8223f6d)
client-bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. (0e347c4)
client-database-migration-service: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. (c44cfad)
client-device-farm: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface (574b189)
client-ec2: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. (c0076d8)
client-glue: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). (266572c)
client-guardduty: Add S3 On-Demand Object Scanning (0d0b1ae)
client-lex-models-v2: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. (f2bcb72)
client-medialive: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. (d994f74)
client-mediapackagev2: Add support for SCTE messages in Segment file output (67d2919)
client-mwaa-serverless: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. (53dbffc)
client-opensearch: This release adds index operation APIs to support Automatic Semantic Enrichment feature (8e96aa9)
client-pcs: Added support for the managed Slurm REST API endpoint (2557db0)
client-route53resolver: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection (adec304)
clients: update client endpoints as of 2025-11-17 (a9869e9)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.932.014 Nov 2025Deprecated

Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs.

3.932.0(2025-11-14)

New Features

clients: update client endpoints as of 2025-11-14 (87473bd2)
client-ec2: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. (5ba1cf64)
client-datazone: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. (77488e77)
client-medialive: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. (9bcaeef4)
client-imagebuilder: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. (f8fe9d73)

Bug Fixes

core/protocols: decorate service exceptions with unmodeled fields (#7504) (6de803d7)

For list of updated packages, view updated-packages.md in assets-3.932.0.zip

Open source →

Additional notes

Bug Fixes

core/protocols: decorate service exceptions with unmodeled fields (#7504) (6de803d)

Features

client-datazone: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. (77488e7)
client-ec2: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. (5ba1cf6)
client-imagebuilder: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. (f8fe9d7)
client-medialive: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. (9bcaeef)
clients: update client endpoints as of 2025-11-14 (87473bd)

Open source →

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.931.013 Nov 2025

client-sagemaker: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated v

3.931.0(2025-11-13)

Chores

add pkg api shape validation (#7498) (e501b6cf)

New Features

client-sagemaker: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. (99fbf1f1)
client-elastic-load-balancing-v2: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. (555b55de)
client-ecr: Add Amazon ECR FIPS PrivateLink endpoint support (b2a1603e)
client-cloudformation: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. (326e5dda)
client-rds: Updated endpoint and service metadata (b075f0ff)
client-mediaconvert: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. (dc04e020)
client-workspaces-web: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. (36de0dee)
client-controlcatalog: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. (1333cd34)
client-iot-wireless: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices (bcf811ef)
client-ec2: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. (69871860)
clients: use schema-serde in AWS REST XML clients (#7499) (f806a2b9)

Bug Fixes

core/protocols: rest-json default request body conditions (#7501) (37e8b0dd)

For list of updated packages, view updated-packages.md in assets-3.931.0.zip

Open source →

Additional notes

Bug Fixes

core/protocols: rest-json default request body conditions (#7501) (37e8b0d)

Features

client-cloudformation: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. (326e5dd)
client-controlcatalog: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. (1333cd3)
client-ec2: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. (6987186)
client-ecr: Add Amazon ECR FIPS PrivateLink endpoint support (b2a1603)
client-elastic-load-balancing-v2: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. (555b55d)
client-iot-wireless: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices (bcf811e)
client-mediaconvert: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. (dc04e02)
client-rds: Updated endpoint and service metadata (b075f0f)
client-sagemaker: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. (99fbf1f)
client-workspaces-web: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. (36de0de)
clients: use schema-serde in AWS REST XML clients (#7499) (f806a2b)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.930.012 Nov 2025

codegen: sync for idempotencyToken fix in http binding protocols

3.930.0(2025-11-12)

Chores

codegen: sync for idempotencyToken fix in http binding protocols (#7495) (6362fe25)

New Features

client-sagemaker: Add support for trn2.3xlarge instance type for SageMaker Hyperpod (bf8d2ce3)
client-redshift: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (145a8368)
client-amp: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. (4aca00ff)
client-s3tables: Adds support for request metrics metrics APIs for S3 Tables (0cb01631)
client-database-migration-service: Added support of SQL statements creation, metadata model discovery and selection rules transformation. (95bd643b)
client-ec2: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI (fa8c029b)
client-elastic-load-balancing-v2: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. (46928a72)
client-connect: Updated Authentication Profile APIs to add support for automatic logout on user inactivity (99b0f8d9)
clients: use schema-serde in AWS Query & EC2 Query clients (#7489) (e9b6da8f)

Tests

client-cloudwatch: e2e test of protocol selection (#7491) (bb14b543)

For list of updated packages, view updated-packages.md in assets-3.930.0.zip

Open source →

Additional notes

Features

client-amp: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. (4aca00f)
client-connect: Updated Authentication Profile APIs to add support for automatic logout on user inactivity (99b0f8d)
client-database-migration-service: Added support of SQL statements creation, metadata model discovery and selection rules transformation. (95bd643)
client-ec2: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI (fa8c029)
client-elastic-load-balancing-v2: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. (46928a7)
client-redshift: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (145a836)
client-s3tables: Adds support for request metrics metrics APIs for S3 Tables (0cb0163)
client-sagemaker: Add support for trn2.3xlarge instance type for SageMaker Hyperpod (bf8d2ce)
clients: use schema-serde in AWS Query & EC2 Query clients (#7489) (e9b6da8)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.929.011 Nov 2025

client-batch: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023.

3.929.0(2025-11-11)

Documentation Changes

client-batch: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. (42db21d3)

New Features

client-bedrock-data-automation: Added support for Language Expansion feature for BDA Audio modality. (e2374dbd)
client-medical-imaging: Added new fields in existing APIs. (8e8ee4a0)
client-ec2: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. (165cccca)
client-security-ir: Added support for configuring communication preferences as well as clearly displaying case comment author identities. (6c2d4f91)
client-rtbfabric: Added LogSettings and LinkAttribute fields to external links (5f3dd496)
clients: use schema-serde in AWS REST JSON clients (#7485) (99a36932)
- output objects having type ?: Uint8ArrayBlobAdapter (optionally present byte array) such as for Lambda::invoke or AppConfig::getLatestConfiguration now have nullish (null/undefined) values when no HTTP body was present in the response rather than an empty Uint8ArrayBlobAdapter container.
- The full list of operations can be found with this search: https://github.com/search?q=repo%3Aaws%2Faws-sdk-js-v3%20%22%3F%3A%20Uint8ArrayBlobAdapter%3B%22&type=code

Tests

client-s3vectors: add e2e test (#7487) (8d3df6ff)
client-dynamodb: e2e test for type registry based error handling (#7486) (ba1aeb67)
client-cloudwatch-logs: e2e test for live tail event streams (#7484) (3d7ac161)

For list of updated packages, view updated-packages.md in assets-3.929.0.zip

Open source →

Additional notes

Features

client-bedrock-data-automation: Added support for Language Expansion feature for BDA Audio modality. (e2374db)
client-ec2: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. (165cccc)
client-medical-imaging: Added new fields in existing APIs. (8e8ee4a)
client-rtbfabric: Added LogSettings and LinkAttribute fields to external links (5f3dd49)
client-security-ir: Added support for configuring communication preferences as well as clearly displaying case comment author identities. (6c2d4f9)
clients: use schema-serde in AWS REST JSON clients (#7485) (99a3693)

Open source →

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.928.010 Nov 2025

core/protocols: set public release level for runtime protocols

3.928.0(2025-11-10)

Chores

core/protocols: set public release level for runtime protocols (#7482) (78a69dc8)

New Features

client-verifiedpermissions: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. (d635af58)
client-appstream: AWS Appstream support for IPv6 (6fc319f4)
client-datazone: Remove trackingServerName from DataZone Connection MLflowProperties (8c22eaae)
client-acm-pca: Private Certificate Authority service now supports ML-DSA key algorithms. (1bd0b8f9)
client-backup: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). (d45f0ebc)
client-guardduty: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. (9b11c354)
client-ec2: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. (2b4fb805)
client-iam: Added CreateDelegationRequest API, which is not available for general use at this time. (a7579e45)
client-sts: Added GetDelegatedAccessToken API, which is not available for general use at this time. (41552ed6)
client-wafv2: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. (79d73853)
client-kafka: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. (265e5dae)
client-braket: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. (6c179ae7)
client-invoicing: Added new invoicing get-invoice-pdf API Operation (de2f6799)
client-dsql: Cluster endpoint added to CreateCluster and GetCluster API responses (647406db)
clients: use schema-serde in AWS JSON RPC clients (#7483) (b0f07b49)

For list of updated packages, view updated-packages.md in assets-3.928.0.zip

Open source →

Additional notes

Features

client-acm-pca: Private Certificate Authority service now supports ML-DSA key algorithms. (1bd0b8f)
client-appstream: AWS Appstream support for IPv6 (6fc319f)
client-backup: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). (d45f0eb)
client-braket: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. (6c179ae)
client-datazone: Remove trackingServerName from DataZone Connection MLflowProperties (8c22eaa)
client-dsql: Cluster endpoint added to CreateCluster and GetCluster API responses (647406d)
client-ec2: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. (2b4fb80)
client-guardduty: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. (9b11c35)
client-iam: Added CreateDelegationRequest API, which is not available for general use at this time. (a7579e4)
client-invoicing: Added new invoicing get-invoice-pdf API Operation (de2f679)
client-kafka: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. (265e5da)
client-sts: Added GetDelegatedAccessToken API, which is not available for general use at this time. (41552ed)
client-verifiedpermissions: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. (d635af5)
client-wafv2: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. (79d7385)
clients: use schema-serde in AWS JSON RPC clients (#7483) (b0f07b4)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.927.07 Nov 2025

client-ec2: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints

3.927.0(2025-11-07)

New Features

client-ec2: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service (650aa6de)
client-opensearch: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. (ea5f4e47)
client-vpc-lattice: Amazon VPC Lattice now supports custom domain name for resource configurations (f46fcf1f)
client-controltower: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs (89c1f79d)
client-kms: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec (1d8341db)

Bug Fixes

client-elastic-beanstalk: differentiate modeled and synthesized service base exception name (5e1e54b4)

Tests

core/protocols: add shape serde perf baselines (#7479) (40bc6005)

For list of updated packages, view updated-packages.md in assets-3.927.0.zip

Open source →

Additional notes

Bug Fixes

client-elastic-beanstalk: differentiate modeled and synthesized service base exception name (5e1e54b)

Features

client-controltower: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs (89c1f79)
client-ec2: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service (650aa6d)
client-kms: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec (1d8341d)
client-opensearch: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. (ea5f4e4)
client-vpc-lattice: Amazon VPC Lattice now supports custom domain name for resource configurations (f46fcf1)

Open source →

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.926.06 Nov 2025

core/protocols: make error lookup in runtime protocol consistent with existing codegen

3.926.0(2025-11-06)

Chores

core/protocols: make error lookup in runtime protocol consistent with existing codegen (#7478) (64e9c616)

New Features

clients: update client endpoints as of 2025-11-06 (4d3f1528)
client-connect: Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. (45c43b47)
client-gamelift: Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. (e38ba819)
client-sagemaker: Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. (382a2ff3)
client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (cb2626e6)
client-accessanalyzer: New field totalActiveErrors added to getFindingsStatistics response. (595167c7)
client-s3tables: Adds support for tagging APIs for S3 Tables (4c268176)
client-ec2: Add Amazon EC2 R8a instance types (7cb13679)
client-identitystore: IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. (28d85047)
client-quicksight: Support for New Data Prep Experience (02e87fe9)
client-ssm: Provides NoLongerSupportedException error message (70be2a35)
client-backup: AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. (b83f5f99)

For list of updated packages, view updated-packages.md in assets-3.926.0.zip

Open source →

Additional notes

Features

client-accessanalyzer: New field totalActiveErrors added to getFindingsStatistics response. (595167c)
client-backup: AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. (b83f5f9)
client-connect: Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. (45c43b4)
client-ec2: Add Amazon EC2 R8a instance types (7cb1367)
client-gamelift: Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. (e38ba81)
client-identitystore: IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. (28d8504)
client-quicksight: Support for New Data Prep Experience (02e87fe)
client-s3tables: Adds support for tagging APIs for S3 Tables (4c26817)
client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (cb2626e)
client-sagemaker: Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. (382a2ff)
client-ssm: Provides NoLongerSupportedException error message (70be2a3)
clients: update client endpoints as of 2025-11-06 (4d3f152)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.925.05 Nov 2025

deps: bump smithy package versions

3.925.0(2025-11-05)

Chores

codegen:
- bump codegen version to 0.37.0 (#7476) (db3e4c47)
- upgrade smithy to 1.63.0 (#7474) (beb698c7)
deps: bump smithy package versions (#7475) (4a796b6c)

New Features

client-sagemaker: Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . (a29341a5)
client-datazone: Added support for Project Resource Tags (64852ec8)
client-s3: Launch IPv6 dual-stack support for S3 Express (a6a3e298)
client-cloudfront: This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross-account resource sharing to share your VPC origins with other AWS accounts (75c3cef3)
client-groundstation: Introduce CreateDataflowEndpointGroupV2 action (67ac8eb6)
client-ec2: This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. (68aae5bd)
client-fsx: Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. (4e481ba5)

For list of updated packages, view updated-packages.md in assets-3.925.0.zip

Open source →

Additional notes

Features

client-cloudfront: This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross-account resource sharing to share your VPC origins with other AWS accounts (75c3cef)
client-datazone: Added support for Project Resource Tags (64852ec)
client-ec2: This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. (68aae5b)
client-fsx: Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. (4e481ba)
client-groundstation: Introduce CreateDataflowEndpointGroupV2 action (67ac8eb)
client-s3: Launch IPv6 dual-stack support for S3 Express (a6a3e29)
client-sagemaker: Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . (a29341a)

Open source →

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

3.922.031 Oct 2025

clients: update client endpoints as of 2025-10-31

3.922.0(2025-10-31)

New Features

clients: update client endpoints as of 2025-10-31 (a3fc323e)
client-fms: Update endpoint ruleset parameters casing (52136e4a)
client-sagemaker: Allow update of platform identifier via UpdateNotebookInstance operation. (7e15a9e2)
client-lambda: Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda (833a43f4)
client-cloudwatch-logs: Update endpoint ruleset parameters casing (e778e04b)
client-mediaconvert: Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. (ad80a044)
client-redshift: Update endpoint ruleset parameters casing (8dab0d0c)
client-ec2: Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. (21a7dd38)
client-emr: Update endpoint ruleset parameters casing (647ff669)
client-connectcases: Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. (c5f00435)
client-health: Update endpoint ruleset parameters casing (91db038d)
client-snowball: Update endpoint ruleset parameters casing (dbcb489e)
client-resource-groups-tagging-api: Update endpoint ruleset parameters casing (808f229f)
client-textract: Update endpoint ruleset parameters casing (2d00f767)
client-fsx: Update endpoint ruleset parameters casing (fa7903c3)
client-kinesis: Update endpoint ruleset parameters casing (1fbd3b63)
client-waf: Update endpoint ruleset parameters casing (88423667)
client-marketplace-catalog: Update endpoint ruleset parameters casing (84ab3c44)
client-ssm-quicksetup: Update endpoint ruleset parameters casing (6bda7950)
client-payment-cryptography: Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. (71d7f21d)
client-savingsplans: Add dual-stack endpoint support for Savings Plans (bbb2fe9f)
client-omics: Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types (efb1c6fb)

Bug Fixes

middleware-user-agent: allow hash in userAgentAppId and propagate to inner clients (#7469) (03d94d1e)

Tests

client-s3: increase bucket name randomness (#7468) (889767cb)

For list of updated packages, view updated-packages.md in assets-3.922.0.zip

Open source →

Additional notes

Bug Fixes

middleware-user-agent: allow hash in userAgentAppId and propagate to inner clients (#7469) (03d94d1)

Features

client-cloudwatch-logs: Update endpoint ruleset parameters casing (e778e04)
client-connectcases: Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. (c5f0043)
client-ec2: Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. (21a7dd3)
client-emr: Update endpoint ruleset parameters casing (647ff66)
client-fms: Update endpoint ruleset parameters casing (52136e4)
client-fsx: Update endpoint ruleset parameters casing (fa7903c)
client-health: Update endpoint ruleset parameters casing (91db038)
client-kinesis: Update endpoint ruleset parameters casing (1fbd3b6)
client-lambda: Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda (833a43f)
client-marketplace-catalog: Update endpoint ruleset parameters casing (84ab3c4)
client-mediaconvert: Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. (ad80a04)
client-omics: Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types (efb1c6f)
client-payment-cryptography: Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. (71d7f21)
client-redshift: Update endpoint ruleset parameters casing (8dab0d0)
client-resource-groups-tagging-api: Update endpoint ruleset parameters casing (808f229)
client-sagemaker: Allow update of platform identifier via UpdateNotebookInstance operation. (7e15a9e)
client-savingsplans: Add dual-stack endpoint support for Savings Plans (bbb2fe9)
client-snowball: Update endpoint ruleset parameters casing (dbcb489)
client-ssm-quicksetup: Update endpoint ruleset parameters casing (6bda795)
client-textract: Update endpoint ruleset parameters casing (2d00f76)
client-waf: Update endpoint ruleset parameters casing (8842366)
clients: update client endpoints as of 2025-10-31 (a3fc323)

Additional notes

Note: Version bump only for package @aws-sdk/credential-provider-node

Open source →

@aws-sdk/credential-provider-node

Release timeline

Releases

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Chores

Bug Fixes

Chores

Chores

3.972.0(2026-01-20)

Chores

New Features

Features

3.971.0(2026-01-16)

Chores

Documentation Changes

New Features

Features

3.970.0(2026-01-15)

Chores

Documentation Changes

New Features

Bug Fixes

Bug Fixes

Features

3.969.0(2026-01-14)

Chores

Documentation Changes

New Features

Tests

Features

3.968.0(2026-01-13)

Chores

New Features

3.967.0(2026-01-12)

Chores

New Features

Tests

Features

3.966.0(2026-01-09)

Chores

New Features

Features

3.965.0(2026-01-07)

Chores

New Features

Tests

Features

3.964.0(2026-01-06)

Chores

New Features

Bug Fixes

Bug Fixes

Features

3.962.0(2026-01-02)

Chores

New Features

Tests

Features

3.958.0(2025-12-23)

Chores

New Features